[c-nsp] Netflow export error from C6506 (WS-X6704-10GE)

[Mack McBride]

Those tcam values look really odd.
It almost seems like the box is doing destination netflow vs interface-full even though
it appears to be set to interface-full.

Mack

-----Original Message-----
From: Stas Bakulin [mailto:stasbakulin at gmail.com] 
Sent: Wednesday, August 10, 2011 11:06 PM
To: Mack McBride
Cc: Peter Rathlev; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE)

#sh mls netflow table-contention detail
Earl in Module 2
Detailed Netflow CAM (TCAM and ICAM) Utilization
================================================
TCAM Utilization             :   0%
ICAM Utilization             :   99%
Netflow TCAM count           :   2606
Netflow ICAM count           :   127
Netflow Creation Failures    :   118945
Netflow CAM aliases          :   0
Earl in Module 3
Detailed Netflow CAM (TCAM and ICAM) Utilization
================================================
TCAM Utilization             :   0%
ICAM Utilization             :   99%
Netflow TCAM count           :   2499
Netflow ICAM count           :   127
Netflow Creation Failures    :   319902
Netflow CAM aliases          :   361
Earl in Module 6
Detailed Netflow CAM (TCAM and ICAM) Utilization
================================================
TCAM Utilization             :   42%
ICAM Utilization             :   0%
Netflow TCAM count           :   110327
Netflow ICAM count           :   1
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0

Stas Bakulin
----------------------------------------------------------------------
ogion at kvant-telecom.ru | www.kvant-telecom.ru
Tel: +7 473 233 0330 (128)




On 10 August 2011 22:39, Mack McBride <mack.mcbride at viawest.com> wrote:
> Do you have a 'sh mls netflow table-contention detail'?
> These figures don't match.
> The ICAM 99% doesn't match the actual alias count.
>
> Mack
>
> -----Original Message-----
> From: Stas Bakulin [mailto:stasbakulin at gmail.com]
> Sent: Wednesday, August 10, 2011 12:37 PM
> To: Mack McBride
> Cc: Peter Rathlev; cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE)
>
> On two DFC simultaneously?)
>
> 6506#sh mls netflow table-contention summary
> Earl in Module 2
> Summary of Netflow CAM Utilization (as a percentage)
> ====================================================
> TCAM Utilization             :   2%
> ICAM Utilization             :   99%
> Netflow Creation Failures    :   109465
> Netflow CAM aliases          :   38
> Earl in Module 3
> Summary of Netflow CAM Utilization (as a percentage)
> ====================================================
> TCAM Utilization             :   2%
> ICAM Utilization             :   99%
> Netflow Creation Failures    :   323735
> Netflow CAM aliases          :   97
> Earl in Module 6
> Summary of Netflow CAM Utilization (as a percentage)
> ====================================================
> TCAM Utilization             :   89%
> ICAM Utilization             :   1%
> Netflow Creation Failures    :   0
> Netflow CAM aliases          :   0
>
>
> Stas Bakulin
> ----------------------------------------------------------------------
> ogion at kvant-telecom.ru | www.kvant-telecom.ru
> Tel: +7 473 233 0330 (128)
>
>
>
>
> On 10 August 2011 22:00, Mack McBride <mack.mcbride at viawest.com> wrote:
>> It sounds like a hardware problem on the 6704s DFC.
>> Getting that many collisions in the TCAM is really odd.
>> You had the flow mask set to interface-full already.
>> I can't see it getting any better.
>> I can't think of anything causing that except a set of crafted packets.
>>
>> Mack
>>
>>
>> -----Original Message-----
>> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Stas Bakulin
>> Sent: Wednesday, August 10, 2011 4:52 AM
>> To: Peter Rathlev
>> Cc: cisco-nsp at puck.nether.net
>> Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE)
>>
>>> Stas: What kind of traffic does this box see? Is it Internet or
>>> something else? Does the situation allow you to try changing the
>>> flow-mask to see how that makes a difference?
>>
>> Internet.
>> Changing flow-mask gave nothing.
>>
>> Stas Bakulin
>> ----------------------------------------------------------------------
>> ogion at kvant-telecom.ru | www.kvant-telecom.ru
>> Tel: +7 473 233 0330 (128)
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>